Head of Product Security (m/w/d)

Your Profile:

• Several years of experience in product security, application security, or as a deputy CISO within a complex, multi-product software organisation.
• Demonstrable, current expertise in the EU Cyber Resilience Act – requirements, classification logic, and conformity assessment – along with working knowledge of NIS2 and GDPR.
• Strong, practical knowledge of the secure development lifecycle, threat modelling, and application security testing, together with hands-on experience with SAST, DAST, SCA, and SonarQube tooling.
• Experience with SBOM generation and governance, as well as with managing supply chain risk; understanding of AI-assisted and agentic development workflows.
• Strong communication and stakeholder management skills to enforce standards without direct line authority; CISSP or an equivalent certification is an advantage.
• Fluent in German and English, with excellent written and verbal communication skills.

What you can expect from us:

• Mobile work : Work flexibly on the move two days a week and on site three days a week.
• Attractive locations: In addition to fully equipped workplaces, regular events such as summer parties and Christmas parties await you at our locations.
• Development: Our in-house academy and our portfolio of external cooperation partners will support you in your further development.
• Health: Health is a valuable asset for us. Our in-house canteen offers a selection of tasty and healthy dishes every day, and we welcome you to our fully equipped fitness center for weekly courses (online & offline).
• More is always possible : The kindergarten on our CGM campus in Koblenz helps our employees to organize their working day even more flexibly. We also offer corporate benefits, the option of a job bike, a company pension scheme, and much more.

Diversity is part of CGM! We look forward to receiving your application regardless of disability, gender, nationality, ethnic and social background, religion, age, sexual orientation, and identity.

We show an excerpt and a link, and the full text when the source allows it. Brands and logos shown belong to their owners.

Source: Statistisches Bundesamt (Destatis), table; dl-de/by-2-0; StarIn's calculation